The Polarity - Redis integration enables analysts to connect to any Redis caching server and query that server for different indicators. Enabling analysts to query any Redis server they need to access.
The Redis integration provides a generic method for querying Redis (including Elasticache for Redis). The integration issues a simple GET request for a configured key pattern, and returns the value to display in the Overlay Window.
The integration supports key values that are properly formatted JSON as well as plain strings.
(Example key-value pair in Redis with JSON formatting)
If the value is JSON, the integration will display the output as a formatted JSON object, or in a tabular format. If the value is a simple string then the string will be displayed.
For JSON objects the integration supports specifying which keys should be used as summary tags as well as specifying labels for those keys.
Examples
Redis Data Overview
Summary Tags: When running a search with Redis, analysts will quickly know the important information coming from the database. The summary tags are set up as a part of the initial integration setup. So they can vary depending on the Redis server.
JSON Formatted Data: When drilling into the details of the Redis integration, analysts will get the full JSON paylod of the lookup. Enabling quick insights into the associated data.